Okta Configuration

Okta Settings

Cantina is directly integrated with Okta. In order to configure Okta, visit your Okta Admin Console, and click on Applications.

Once in the Applications section, click on the Create App Integration button and choose "OIDC - OpenID Connect" from the first screen. Click Next.

Choose "Web Application" from the Application Type setting and click Next.

Once created, choose a name for your app - we generally just use "Cantina". Most importantly, set the Sign-in redirect URIs to https://cantina-prod.us.auth0.com/login/callback

Cantina Settings

Visit your Organisation settings in Cantina and click on `Single Sign-On". You can use the following URL: https://cantina.xyz/organization/settings/sso

Click the Add SSO Connection button.

You will see a screen to create the connection to Okta.

Okta Tenant URL

You should be able to retrieve this from your Okta configuration. If you are in the admin panel, make sure you remove the -admin from your URL.

Client ID

Copy your Client ID from your Application; this is illustrated below in (1).

Client Secret

Copy your Client Secret from your Application; this is illustrated below in (2).

Email Domain

Please contact Cantina if you need to change this. Cantina does not have the concept of workspaces, as such all users with this domain will be redirected to Okta when they log in.

Testing

You're all set. You should now be able to log out of Cantina. The next time you log in, use the email field on our signup screen, and you will automatically be redirected to Okta to log in.